This Privacy Policy explains how Leaf Hill LLC, doing business as Personal Cybersecurity Fundamentals (“we,” “us,” or “our”), collects, uses, and shares information about you when you visit personalcybersecurityfundamentals.com (the “Site”), purchase or access our online course and related content, or otherwise interact with us (collectively, the “Services”). We are based in Savannah, Georgia, United States. By using the Services, you agree to this Policy.

01

Information We Collect

Information you provide to us directly, including:

  • Account and contact details such as your name and email address

  • Purchase information you submit at checkout (billing name, email, and billing address); your full payment card number is collected and processed by our payment processor, not stored by us

  • Communications you send us, such as support requests, replies to our emails, or survey responses

  • Any other information you choose to provide

Information we collect automatically when you use the Services, including:

  • Device and usage data such as IP address, browser type, device identifiers, pages viewed, links clicked, and the dates/times of your visits

  • Course activity such as lessons or modules viewed and progress within the course

  • Information collected through cookies and similar technologies (see Section 4)

Information from third parties, such as our payment processor, email/marketing platform, and analytics or advertising providers, consistent with their own terms and privacy policies.

02

How We Use Your Information

We use the information we collect to:

  • Provide, operate, and deliver the course and other Services, including granting and managing your access

  • Process payments, subscriptions, and renewals, and send related receipts and account notices

  • Respond to your questions and provide customer support

  • Send you administrative messages and, where permitted, marketing or promotional emails about our courses and offers (you may opt out at any time)

  • Personalize and improve the Services, and understand how they are used

  • Maintain the security and integrity of the Services and prevent fraud or misuse

  • Comply with legal obligations and enforce our terms and agreements

03

Legal Bases for Processing (where applicable)

Where required by law, we process personal information based on one or more of the following: your consent; the performance of a contract with you (such as providing the course you purchased); our legitimate interests in operating and improving the Services; and compliance with our legal obligations.

04

Cookies and Tracking Technologies

We and our providers use cookies, pixels, and similar technologies to operate the Site, remember your preferences, measure performance, and support marketing. This may include analytics and advertising tools such as [e.g., Google Analytics] and advertising pixels such as [e.g., the Meta (Facebook) Pixel and/or Google Ads]. You can usually control cookies through your browser settings; disabling some cookies may affect how the Site works. See Section 9 for choices related to advertising.

05

How We Share Information

We do not sell your personal information for money. We share information only as described below:

  • Service providers who perform functions on our behalf — for example, our course/funnel platform ([e.g., HighLevel]), our payment processor ([e.g., Stripe]), our email/marketing platform, and analytics and hosting providers — who may use the information only to provide services to us

  • Advertising and analytics partners, in connection with the cookies and pixels described in Section 4

  • Legal and safety purposes, such as to comply with a law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of our users, ourselves, or others

  • Business transfers, such as in connection with a merger, acquisition, financing, or sale of assets, in which case information may be transferred as part of the transaction

  • With your consent or at your direction

Note: Some state privacy laws define “sale” and “sharing” broadly to include certain uses of advertising cookies. Your attorney should confirm the correct disclosures and any opt-out mechanisms for your setup.

06

Payment Processing

Payments are processed by our third-party payment processor, [e.g., Stripe]. When you make a purchase, your payment card information is provided directly to and handled by the processor under its own terms and privacy policy. We do not store your full payment card number.

07

Data Retention

We keep personal information for as long as needed to provide the Services, maintain your course access, comply with our legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we take reasonable steps to delete or de-identify it.

08

Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

09

Your Choices

  • Email marketing: You can unsubscribe from marketing emails at any time using the link in those emails. We may still send you non-promotional messages about your account or purchases.

  • Cookies and advertising: You can manage cookies through your browser and may be able to limit interest-based advertising through tools offered by the advertising networks (for example, industry opt-out pages).

  • Access and updates: You may contact us to access, correct, or update the account information you have provided.

10

Your U.S. State Privacy Rights

Depending on where you live, you may have rights under your state's privacy laws — for example, the right to request access to, correction of, or deletion of your personal information, to request details about how it is used and shared, and to opt out of certain targeted advertising or “sale”/“sharing.” Residents of states such as California, Virginia, Colorado, Connecticut, Utah, and others may have such rights. We will not discriminate against you for exercising them. To make a request, contact us using Section 14; we may need to verify your identity before responding.

11

Children's Privacy

The Services are intended for adults and are not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us and we will take appropriate steps to delete it.

12

Third-Party Links and Services

The Services may contain links to third-party websites or services that we do not control. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review their policies.

13

Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Services after an update means you accept the revised Policy.

14

Contact Us

If you have questions about this Policy or your personal information, contact us at:

Leaf Hill LLC d/b/a Personal Cybersecurity Fundamentals

Savannah: 8735 Dunwoody Place, Ste N, Atlanta, GA 30350

Email: [email protected]

Draft prepared as a starting point for attorney review. Not legal advice.

© 2026 Leaf Hill Cyber LLC. All rights reserved.